No phsically shutdown since bitlocker encryption?

Question:No phsically shutdown since bitlocker encryption?

Since I have encrypted my computer (2HDDs) with bitlocker I cannot perform a total shutdown including the pysical break from power. After a few seconds I get a black screen and the shutdown process stops. To end the session I must push the button of my laptop for a few seconds. Is there a way around to shutdown the computer without using the hardware?

Since I have encrypted my computer (2HDDs) with bitlocker I cannot perform a total shutdown including the pysical break from power. After a few seconds I get a black screen and the shutdown process stops. To end the session I must push the button of my laptop for a few seconds. Is there a way around to shutdown the computer without using the hardware?

I don't now will this help you, but you can try itBitLocker Drive Encryption Step-by-Step Guide

Limit Windows shutdown options ...This behavior can be controlled in Windows Group Policy. See the ?Shutdown: Allow system to be shut down without have to log on? setting in Windows security policy...System Integrity Team Blogcheers

I have an older Laptop that operates on Windows 7 Ultimate,I have the Bitlocker Drive Encryption on and encrypted for Drive C: I now started the process of encrypting my external usb hdd Drive E: which has a long way to go for it's large
size. During the encryption I needed to disconnect it so I paused the encryption like it says to do before removing or changing any files on it. I then plugged my drive into a newer laptop I have that operates on Windows 10,. I was prompted for the Bitlocker
Drive Encryption Password screen like normal just like on my Windows 7 laptop so I enter the password and it was correct and it began the encryption process again. When I finished with what I needed to do on the Windows 10 laptop I paused the encryption again
and disconnected the drive. I am now back on my Windows 7 Ultimate OS and plugged the drive in, Bitlocker Encryption Password Screen comes up again and I entered my password but now for some reason it's saying the password is incorrect? "But It's
not incorrect",is there a reason why this has happen and a way to fix it? My second issue is that I have the recovery key written down on paper but on the fifth line of the eight lines that makes the recovery key I left out a number,did not write it correctly,
there for I cannot just reset my password using the key and get back to normal again. Any way to find the lost number to the key? As I do have the rest of it written correctly please help tha... Read more

Installing MBAM with SCCM 2007. Normally works fine. On one workstation however...
On SCCM it fails. Without details.
When trying to run C:\Program Files\Microsoft\MDOP MBAM\MBAMClientUI.exe manually the error comes up. "BitLocker drive encryption has a problem and must close. BitLocker will close now. Contact the help desk of your company if you need additional help.
Details: Error fetching the encryption percentage complete."

Any ideas?

Answer:BitLocker drive encryption has a problem and must close. Details: Error fetching the encryption percentage complete.

bit locker drive encryption failed to recover from an abruptly terminated conversion
i have 2tb segate hd i have stoped encryption on 94% and shut-down pc now im getting this message 'bitlocker drive encryption failed to recover from an abruptly terminated conversion' while unlocking hd what to do? i will get my data?........please
help me

Initially I found that BitLocker on the Go supported removable media like flash drives and external drives. Why isn't a CD/DVD supported since it is considered removable media? Will this support be available in future releases?

Answer:Will BitLocker or BitLocker on the Go ever support CD/DVD encryption?

Hi,

Bitlocker to Go is not supported on CD/DVD. Your suggestion is valuable, I will forward this information to the appropriate department through our internal channel.
Both the Microsoft Product Team and Development Team will take into consideration all suggestions and feedback for future releases.

Hi Mr/Ms
I
flash
drive encrypted
with BitLocker
I used
this
driver for three months my computer is broken I bought a new computer when i was try my flash disk new computer its give me this problem
BitLocker Drive Encryption failed to recover from an abruptly terminated conversion. This could be due to either all conversion logs being corrupted or the media being write-protected
? know my passworrd but I do not know
the BitLocker
recovery key what can i do know pls some one help me

The windows 10 Pro computer has died, and I would like to put the in my new computer with windows 10 home. I would like to remove the bit locker password, so I can reinstall windows 10 pro while keeping my files and apps,
I'm unable to do this while the drive is encrypted. How do I remove drive encryption from the drive while I have the drive slaved to a windows 10 home computer?

How do I encrypt my Extrenal HDD with BitLocker as I don't get any direct options for encrypting the drive?
Also, is there any option to encrypt the drive without formatting because I don't want to lose my data

I am having a hard time trying to figure out what encryption method and cypher strength is used on my Bitlocker to go encrypted portable hard drive.

I understand the settings for Bitlocker are configured in the Group Policy Editor but besides that is there any way to see what level of encryption your portable drive has.

When I encrypted this drive, I left the Group Policy settings default when encrpyting the drive which means the drive was supposedly encrypted using 128-bit with diffuser.

This would come in handy when trying to prove to someone that the device is infact encrypted with either 128-bit or 256-bit.

Answer:Bitlocker To Go Encryption Level

Hello Doc, and welcome to Seven Forums.

If the computer does not have Group Policy included to look at, then you can edit (right click on REG file and click on Edit) the REG file downloads in OPTION TWO of the tutorial below, then check the registry and compare it to the REG file downloads to see how it set. By default, it is set to 128-bit with diffuser in Windows 7.

I have followed the instructions as per this forum to enable a Startup key in gpedit.msc as I dont have TPM which worked.

After following the instructions, Windows Bitlocker asked me to insert a USB to save the startup key to. This appeared to save and then moved onto the next step where I took down the recovery key etc... and finally restarted to make sure my system was compatible before encryption started.

Upon restart, Windows said that it couldnt find a key on the USB drive. After further investigation I found that windows did not save the key to the USB after all even checked as a hidden file. It will save the text file (recovery key) to usb but not the bek file for the startup key.

I have tried this several times but each time it wont save although the system dosent say there has been a problem and moves on to the next stage.

The USB is a 2gb cruzer with the smart drive software removed and re-formatted to NTFS. I have also tried this on other USB drives with no luck and the USB drives work as Iam able to write other things to it?

Any help would be greatly appriciated as I have searched this forum and MS forums with no luck.

ThanksMarc

Answer:Bitlocker Drive Encryption using USB

Same problem here. Different USB drives or different usb ports didn't change anything.

I have Windows 7 installed and i use a 4GB memory card for private files. The problem is i used Bitlocker encryption, which was working fine until i installed windows updates. Now this mrning i cannot access the memory card at all. It just says drive not accessible although it does recognise that the drive is there. I have tried system restore which also at the moment will not restore to any point. Can anyone help me with this problem please.

Answer:Bitlocker encryption problem

cant think of anything off hand to help with your immediate problem but for future have you tried the yo-safe feature in win locker in win 7 it gives u drive you can hide so no one even knows its there and even someone who knows abt yo-safe cant get into it as when you open the yo-safe it asks for your password you can make your password the same as your master password when windows starts or you can give it a different password.

bare with me on this, it may sound stupid and have a very simple answer.

I've got a laptop which I currently have Symantec Desktop Encryption installed with C:/ encrypted. Personally not quite sure if the files it self on C:/ are encrypted or not (I'm able to access my laptop which has the drive encrypted, over the network from my desktop without any issues/error messages to say its encrypted etc)

This is where the possible stupidity comes in. Symantec current has the drive encrypted (Enter password before booting to Windows), but I was wondering if the data it self is encrypted and if not, would it be possible to do this within Symantec (Cant seem to find a way) if not, would Bitlocker be a solution to encrypting the data or will this cause confliction?

On the side as well, I know that Windows has an option to show folders/directories in a different color if they are encrypted, this option is enabled, but none of the directories are coloured, any idea how to get this to work?Thanks in advanceJosh

Answer:Using Bitlocker and Symantec Encryption

If it said encrypted, it really is. For example, someone detached the hard drive from your system and then inserted that to another computer to read the contents. Symantec will notify a password entry and if there's no recovery key, you won't be able to access it. It works like BitLocker To Go. BitLocker Drive Encryption doesn't need a password prompt if the drive is connected to the original motherboard and there's no changes to BIOS settings or updates AFAIK.

Win7 has disk imaging software and file backup software in most of the versions, both able to be scheduled. Additionally, there is also an included utility to create a restore CD.

Yes, yes, all of these can be had by excellent third party apps but it is enlightening to see MS finally come around and include more required OS-type utilities with the OS itself.

edit: Woah, my response here was to a completely different post, one questioning the need to upgrade from XP to Win7. Either the mods or the OP significantly changed the original post. Normally I am not that obtuse when replying.

While using BitLocker Drive Encryption feature, i selected the settings for using the USB to store the security key. But, once I restarted my PC, BitLocker didn't recognized the USB and went into recovery mode.

Can anyone suggest as to why the USB key was not taken into consideration?

Answer:BitLocker Drive Encryption

Windows Vista didn't provided any means by which a user working on Windows XP could access a shared folder of an BitLocker encrypted drive. But, this feature was provided in Win 7 in the form of BitLocker To Go feature.

can somebody help i use the bitlocker drive encryption and i freeze it in 80% encryption and now i can't access my USB flash drive i try to format it and it's always say "windows was unable to complete the format" my USB flash drive is protect by bitlocker drive encryption when i unlock my USB flash drive in bitlocker drive encryption it's always say "the device is not ready" Please Help ! i want to format my usb flash drive can someone help me??

Answer:Help me !! bitlocker drive encryption

Hello James,

Please perform the following:

1. Download and Save to desktop from this link: http://go.microsoft.com/fwlink/?linkid=52012

2. Once saved, run the tool. Click on the Continue button, which will produce the report.

3. Click on the Copy button in the tool (ignore any error messages), and then paste into your next reply.

Hi, I have a problem on my laptop. My office laptop is encrypted using Bitlocker as part of our firm's security over our machines and data stored therein.
One Saturday, I opened my laptop when it got hibernated last friday night after work. At startup, it ask for my password, I entered it but it showed: "Too many PIN attempts".
I dont know why and how it happened as I did not change my laptops for the last 3 months since it was issued to me. Since its a weekend, I asked some of our IT personnel having their rest days on how to resolve this, they taught to search for the recovery key
in their database using the identifier provided by bitlocker. I found the files recovery keys but no one matched the identifier showed on my laptop's screen (that cant be accessed).
My question is, what if the recovery keys of my laptop cannot be located anymore, are there ways possible where I can still log-in again losing my files? thanks.

hi hw r u i want to know abt the drive encryption option in windw 7 i used Bitlocker drive encryption to lock or save my drive data(confidential data) frm others. ques is that this encryptn method is right i mean it will damage my hard disk or not . kindly tell me and if u tell me more methods for protection i really appreciate u.thanks

Answer:Bitlocker drive encryption

It will not damage the HDD just make sure you save the "Key" in a save place not on the computer (A hard copy on paper and a digital copy on a thumb drive two backups of the key is best) also the Windows OS partition or HDD can not be encrypted using Bitlocker.

Set up your hard disk for BitLocker Drive Encryption - Microsoft Windows Help

Hey there. I'm having trouble unlocking my external flash drive which was encrypted by me a few months back. It was encrypted using my desktop PC which is not working anymore. I'm trying to unlock it using my laptop.
The problem is, I am entering the correct password but it's marking it as incorrect. I am sure about the password because I had stored it in my phone.

I have a .pfx certificate as well but I really don't know how will it be helpful in unlocking the device. I had saved this .pfx file because while the process of encryption, windows had advised me to save it. Any help will be appreciated. I really need to unlock
this device as the data it contains is irreplaceable.

Thought I'd ask before I do something stupid I'd like to encrypt my fileservers with Bitlocker but I wonder how fast it is these days? The servers run Windows 8.1 and when trying on another system I get about 100MB reads and writes during encryption - is this somewhere in the ballpark for performance? Oh and the cpu supports hardware encryption as well

Thanks in advanceEdit:

Just finished encrypting a Raid6 array with 8x2TB drives. Time approximately 24 hours and an average speed of about 125-130MB/sec. Cpu is an AMD A4 5300 dual core cpu. Not so bad imho.

Hello,
Can someone advise the steps to get Bitlocker installed and working on a windows 7 pro laptop. I just got off the phone with a microsoft support agent who said it is possible with computers on a domain. She
couldn't give me any more info and directed me to technet.
Please share any info you may have
thanks

I m having problems with bitlocker .... my hard drives are not showing in control panel-->system&security-->Bitlocker Encryption drive .... any help related to this please ?????????????????????????????????????????????????????????

Answer:Bitlocker Encryption drives

Make sure you have ALL of the requirementsHardware requirements for BitLocker Drive Encryption

If I have already encrypted my data with BitLocker or some other encryption software, will that render ransomware ineffective? Or, does it mean my already-encrypted data just gets another layer of encryption (i.e., double-encrypted)?

Answer:Ransomware vs BitLocker (or any other encryption s/w)

Hi there,If your data is already encrypted then a crypto ransomware would just add its own encryption over the data, making it double encrypted as you said.

I ran the manage-bde -status command of my encrypted OS Volume Drive and it shows 100% encrypted. Does this mean that BitLocker encrypted the ENTIRE drive?

During the BitLocker setup, I did select to Encrypt the Entire Drive instead of the Used Space option.I just want to double check if my entire OS drive is encrypted or not. I assume that when it shows Percentage Encrypted as 100% then I guess it did encrypt the entire drive.

Now what if I had chosen to encrypt the Used Space only, then would it still show as 100% encrypted ? Or am I wrong?

Into another troule.
I wanted to encrypt my Western Digital Portable 500 GB HDD so my data would be safe.
I turned on the Bitlocker for this hard disk and set the password.
After that it started Encrypting..

I knew that it will take a long time so i went to university for lecture.
When i came back the encryption dialouge was stuck at 12.4 %.
[Snap Attached]

I kept waiting for some time but it wasn't working i pulled out the cable and inserted again...

I inserted the key and it unlocked with autorun dialogue and Encrypting Dialogue. [Snap Attached]

Clicking on *Continue without Scanning* brings the my computer windows and it starts searching but doesn't open the harddisk.

All this happens everytime i plug back, i have lost access to my all data thats stored on that harddisk... In my system there iz only 80GB Sata Hard containing OS.

I have tried one thing.
chkdsk /r it worked for a while but on 4th stage it stopped.

Please Can you Guys help me ? i want it to complete the encryption or decrypt whatever it has encrypted or damaged :(

I was trying to encrypt my USB external hard drive (1 TB, mounted to E using BitLocker, and after the encryption got 10.1% finished, I accidentally shut down the computer. After restarting, I tried to resume the encryption, but it gives me an error: "Encryption could not be resumed. The device is not ready." I've tried using >manage-bde -resume E: but it returns the same error with code 0x80070015. I also get the same error if I try to go to the Control Panel and Turn off BitLocker.Running >chkdsk E: shows several corrupt attribute records, but I haven't tried running that with /F since I'm worried that might make it difficult to properly decrypt BitLocker.Are there any recommendations on how to either resume the encryption or decrypt the 10.1% it's already done? I've heard there's a BitLocker repair tool, but I don't have an empty 1 TB drive to use for that.

Hi Guys I did bitlocker drive encryption few months back in my pc but from some days its not showing its unlocking option. Infact bitlocker drive encryption option is not available in control panel. Did any update in windows 10 removed this feature which
I do not know?
Please guide. What should I do? Have a look on pics

Hello,
I have stand alone MBAM 2.5SP1 installed within AD and configured to use with GP. I have old Dell laptop (5 yrs old) with windows 10 and with in the MBAM GP and log-in to the domain. I tried to turn on encryption using BitLocker and I was able to encrypt
the entire C drive. I log on to MBAM helpdesk and test drive recovery and I was able to recovery the key successfully and should all the hardware and who logged into the laptop. Both MBAM and the old laptop with windows 10 work great.

Now I have newer Dell laptop (2 years old) configure identical to the old laptop but it only encrypted locally not with AD/GP and MBAM. I try to search the hostname on MBAM but no available. The laptop logging in to domain controller and I able to run gpupdate
/force successfully. I went to services and try to restart MBAM but it was not there.
Can someone help me?

Hi,I have encrypted a win 8 desktop pc, c: encrypted succesfully but when encrypting the d: it doesn't look like it has encrypted properly. The drive is showing as locked as the encryption status as 'unknown'. I am unable to unencrypt the drive as just the identifier was generated without a recovery key.From event log:A BitLocker key protector was created.Protector GUID: {e0c8456c-37cf-42d0-b9b5-041c9539b385}Identification GUID: {3d839f56-ad70-4449-ae7e-bfc91867aada}The identification field was changed. Identification GUID: {3d839f56-ad70-4449-ae7e-bfc91867aada}BitLocker encryption was started for volume D:.That's the last event for the D:/Is there a way of unlocking the drive from the protector id?Many thanks!

Hey guys, I am currently trying to encrypt one of my external hard drives and it is stuck at 97.1 percent. It isn't paused, it just isnt progressing
any further. It was stuck at this same exact point for two days, so I paused, decrypted, and encrypted it again and now it is stuck at the same 97.1 percent. What should I do about this? Encryption is kind of an all or nothing deal isn't it?

Hey guys, I am currently trying to encrypt one of my external hard drives and it is stuck at 97.1 percent. It isn't paused, it just isnt progressing
any further. It was stuck at this same exact point for two days, so I paused, decrypted, and encrypted it again and now it is stuck at the same 97.1 percent. What should I do about this? Encryption is kind of an all or nothing deal isn't it?

Question: Is it possible to use the command "manage-bde -pause D:" to pause BitLocker encrypting the HDD, which would then allow me to shut down the computer, transport it to my new house, and then turn the computer on and resume the encryption process, without any loss of data or corruption?

I have an internal hard disk drive currently being encrypted (~47%) using BitLocker. In 8 hours time I need to transport the whole PC to a new house where I'll be living permanently, meaning it will need to be turned off and disconnected from the power. Considering the time it has already run I don't think it will complete in time I have available.

If it is not possible to do that I can leave the computer at its original location to complete encryption, the only problem is that there is a large travel distance and the inconvenience of not being able to use my primary computer.

Edit: Forgot to mention that this is an internal HDD used to store downloads, documents, photos, music, and videos. My operating system is stored on an SSD that has already been encrypted.

I tried several times to encrypt the entire disk after reinstalling Windows 10 but it always took for ever (usually 10 hours) to fully encrypt my internal 320GB drive. I managed to run bitlocker successfully by encrypting only used space. My question is should I run cipher.exe /w to wipe all unused space as this is an old laptop?

I have found manage-bde -w c: to wipe free disk and this is now working ok.

How does Bitlocker work when only encrypting used space - i.e. if I write a file to the disk I assume it automatically encrypts it, but if I then delete that file is the space no longer encrypted and therefore open to hackers?Look forward to your comments.Thanks!

Answer:BitLocker - Used Space Encryption on used Laptop?

win10freak said:

How does Bitlocker work when only encrypting used space - i.e. if I write a file to the disk I assume it automatically encrypts it, but if I then delete that file is the space no longer encrypted and therefore open to hackers?

If you take a disk and set bitlocker to encrypt only used space it will encrypt the blocks used by the filesystem. If there was some old deleted stuff on the disk when you started that could in theory be recovered. After turning on bitlocker all new files are encrypted. They are not decrypted when you delete them and these deleted files can't be retrieved.

win10freak said:

I tried several times to encrypt the entire disk after reinstalling Windows 10 but it always took for ever (usually 10 hours) to fully encrypt my internal 320GB drive.

If you have ever encrypted the whole disk you only need to encrypt used space if re-installing. It will not be possible to retrieve anything from the remaining space on the disk as it was previously encrypted.

Has anyone tried to enable hardware based encryption on the P50s with Bitlocker and the SSD? If so, how did it go? I know that on some systems you need just the right combination of BIOS settings and drivers, so I wanted to check and see if anyone had done it and tips you had.

New drive 1gb external, running bitlocker for the first time. Left it overnight cos it was taking forever, (which is the norm)

Woke up this morning and it was stuck on something like 47.1% requesting the bitlocker password, put that in and it starts encrypting again.... But every few random mins it falls over with an error message:

An Error Occurred The System cannot find the file specified.

And prompts me to put my bitlocker password back in, for which I do, and the encrpytion starts again.

Its like at 50% now, after it falling over 3 times in the last 30mins....

I'm not exactly what to do.. I cant sit here for the next 10hrs waiting for it to fall over every few mins asking for the password.

I'd be up for scrapping the whole encrpytion and starting all over again.. But not exactly sure on how to permantely un-crypt the drive and reformat it ? Perhaps running a scandisk before doing so... It was a brand new drive.

I can actually still access the data, because autoplay opens after every error allowing me to see and open the files.

Any suggestions ?

Answer:Bitlocker crashing during initial encryption

TheDoc46, my recommendation is a complete format of the drive. Remove the partitions and then re-create them and then format completely.

Best not to use Bitlocker on an external drive as it is worthless to any other computer due to the encryption technique. Also there are private encryption programs that are just as good like Free Encryption Software - Password Protect Files and Lock Folders

I bought their pro version which I really like, no financial connection, just a satisfied user.

I am using a Lenovo Yoga 260 with Windows 8.1. Every time I reboot the Yoga it requires me to enter the bitlocker recovery key. The PC thinks a configuration change was made to the PC. However no changes were made. I have reimaged the PC and I am still
have experiencing the same issue. I have updated the BIOS and all the PC drivers but still no change. I have reset the TMP chip and decrypted the drive. Still the same results. Any ideas what might be causing this issue?

I have installed and set up BitLocker on a Sony VAIO with a TPM 1.2 chip. The drive has been fully encrypted. With BitLocker on, everytime the system boots I get the following message:

Windows BitLocker Drive Encryption Information
The system boot information has changed since BitLocker was enabled.
You must supply a BitLocker recovery password to start this system.
Confirm that the boot changes to this system are authorized.
If the changes to the boot system are trusted, then disable and re-enable BitLocker. This will reset BitLocker to use the new boot information.
Otherwise, restore the system boot information.
ENTER=Continue
I have tried disabling and re-enabling Bitlocker (disable; reboot; enable; reboot) and get the same message. I have even tried disabling to the point of decrypting and then re-encrypting the whole drive. Neither apporach has worked. According to the BitLocker FAQ, one of the following should trigger the message I'm getting:

Unauthorized changing of the BIOS, master boot record (MBR), boot sector, boot manager, or other early boot components would cause a failure in the integrity checks and keep the TPM-protected key from being released. This is by design because unauthorized modification of any of those components could and should be perceived as an attack. Of course, the BitLocker feature provides methods for authenticated system administrators to update these components if required.
None of that has happened. Any suggestions?
Tha... Read more

Answer:BitLocker requests encryption key at every boot

When I tested it the setting didn't take effect unless I turned off bitlocker and decrypted the drive then turned it back on with the new setting applied.
I forgot to mention in the last post too, open an administrative commmand prompt. (right click on CMD and click Run As Administrator) and type "gpupdate /force" this reloads the GPO. (it usually take a little while for them to refresh by default.)
An earlier post in this thread states that you just need to apply the new PCR settings and reboot, but from my own testing you really do need to disable, decrypt, enable and encrypt with a new key. The only way I found to speed things up without having to wait for the drive to fully encrypt each time was to skip the test, and right away click on the pause encryption option in the ecryption dialog box. I would then perform my reboot test. I have to do it all again though. A reboot test and a hibernate test. It seems hibernating the workstaion also changes startup information on the computer that bitlocker doesn't like.

I have the 1TB NVMe SSD (Samsung PM951) and can't get hardware Bitlocker encryption working. Can someone confirm whether the PM951 supports eDrive/TCG Opal? If not, will a firmware update enable support in the future?I have the TPM and UEFI enabled, but when I try to set up Bitlocker, I do not get the hardware encryption option. Seems like the PM951 should support this like Samsung's retail drives. I can't even use the Samsung disk utilities to investigate because those are only for retail drives.

I was trying to encrypt my USB external hard drive (1 TB, mounted to E using BitLocker, and after the encryption got 10.1% finished, I accidentally shut down the computer. After restarting, I tried to resume the encryption, but it gives me an error: "Encryption could not be resumed. The device is not ready." I've tried using >manage-bde -resume E: but it returns the same error with code 0x80070015. I also get the same error if I try to go to the Control Panel and Turn off BitLocker.Running >chkdsk E: shows several corrupt attribute records, but I haven't tried running that with /F since I'm worried that might make it difficult to properly decrypt BitLocker.Are there any recommendations on how to either resume the encryption or decrypt the 10.1% it's already done? I've heard there's a BitLocker repair tool, but I don't have an empty 1 TB drive to use for that.

Hi Everyone!
I have intresting situation that started quite some time ago but now it´s time to fix it :) We are using MBAM in our environment and SCCM to publish windows 10 to computers. So far everything is working. I have not found correct or good solution to deploy
BitLocker in TaskSequence. All manuals are a bit different. So what I did is: I have GPO managing BitLocker requirement. I will just install MBAM client (2.5 SP1) to computers and when user will get computer then after couple of hours MBAM client will require
to insert PIN and it will start to encrypt the drive. So everything works as I want! I like that users can insert their own PIN and it´s not preinserted by administrator.
Problem is now when computer finish the encryption process and you restart computer. After that computer is asking PIN code (which is correct) and after that it starts Windows Repairing. And it´s not possible to use any repair method (Reset, Restore, Startup
repair etc) - so only option is to format computer. I have noticed that if you encrypt drive before Windows patches then it will survive restart (if it´s working then it´s working!) but if computer will get patches and then you will restart the computer, then
no use - format.
What can cause the issue and how to fix it? Or maybe there is a good manual how to use MBAM/BL in SCCM TS correctly (if I´m doing it wrong!)...
Br,

Hello, I have a Lenovo X1 Carbon 4th gen Type 20FB, 20FC. It has a LITEON L8H-256V2G for an SSD. I've tried to get Bitlocker to hardware encrypt to no avail. I want to find out if this particular SSD is capable of hardware encryption (edrive). I've searched on the Lenovo's support site, these forums and searched on Google without finding an answer. These are the procedures I followed to try and enable hardware encryption:- I enabled CSM in order to boot from a USB optical drive with UEFI only enabled.- I booted with a Win 10 Enterprise disk to get to a command prompt and ran the DISKPART clean command in order to put the drive in an unitialized state.- I restarted the laptop and performed a clean install of Win 10 Enterprise- After windows installation, I went back into the BIOS and enabled secure boot which also disables CSM.- After logging back into Windows, I ran the manage-bde command to try and force hardware encryption (mange-bde -on C: -fet Hardware) but I get an error stating that "the drive specified does not support hardware-based encryption." I know someone will respond with this:For Encrypted Hard Drives used as startup drives:? The drive must be in an uninitialized state.? The drive must be in a security inactive state.? The computer must be UEFI 2.3.1 based and have the EFI_STORAGE_SECURITY_COMMAND_PROTOCOL defined. (This protocol is used to allow programs running in the EFI boot services environment to send securi... Read more

Answer:Bitlocker Hardware Encryption on X1 Carbon with LITEON SSD

I am not sure it will ever work for you. The SSD has to have a firmware that supports the eDrive functionality. I believe that Lenovo stopped producing those a few years back. Please, check this thread for details: https://forums.lenovo.com/t5/forums/v3_1/forumtopicpage/board-id/tp01_en/page/1/thread-id/92686 I got it working on my old ThinkPad Yoga, and the detailed description can be found in that thread. But I had one of the last SSDs with eDrive firmware. Best regards, Karol (joe_e_e)

Bitlocker shows as if it is working, but it doesn't require an encryption key on restart. That's a problem I need to have fixed, please. Ever since I downloaded the notification for the Windows 10 upgrade, my computer has NOT been receiving other upgrade
notifications either. I wonder if there was a bug from that installation. I thought it would help you to know my little history in hopes that you could help people like me who have experienced one or more of these issues. Thank you for your attention to this
matter. ~ Burt

I have Win 10 Pro and I set the Encryption method in Group Policy as being XTS-AES 256 instead of the default XTS-AES 128. Is XTS-AES 256 more secure than XTS-AES 128? https://technet.microsoft.com/en-us/...(v=vs.85).aspx

Hi, Setting this up could be a little bit hard. Please try the following instructions https://helgeklein.com/blog/2015/01/how-to-enable-bitlocker-hardware-encryption-with-ssd/ https://arstechnica.com/civis/viewtopic.php?t=1312261 Regards.

Any valued idea on how Bitlocker can be tweaked to decrypt 1TB EXTERNAL HDD faster? It took over 24Hrs to encrypt it 5 months ago. I have decided to decrypt it but seems like it will take it almost the same amount of time it took to encrypt.

Hi folks, I've been trying hard to get my Crucial m500 SSD hard drive to work in edrive (hardware encryption) mode with the w520. I've read several other threads related to the process for different Lenovo machines, but I haven't seen much discussion on the topic for the W series laptops as of yet. Here's what I've tried so far: Clean install of Windows 8.1, while running the latest bios 1.42.All updates from Windows Update toolAll updates from Lenovo System Update EXCEPT the "Intel Rapid Storage AHCI Driver". This seems to be a major point in other threads since apparently the Intel driver is incompatible. I confirm that I'm running Microsoft's "Standard SATA AHCI Controller".Enable drive bitlocker encryption.Link to image When I enable bitlocker encryption, I'm given the choice to either do the existing data only or the whole drive. According to Crucial tech support, that's a telltale sign that edrive is not being used. As further confirmation, I've also run checked edrive status using this method: Start Command Prompt as Administratormanage-bde -statusCheck "Encryption Method" line. It will read "Hardware Encryption" if edrive is in use. Mine says "AES 128" Moderator comment: Image(s) converted to link(s). For helpful information, please see: About Posting Pictures In The Forums.

Solved! Go to Solution.

Answer:bitlocker edrive hardware encryption on w520 with ...

W520 BIOS doesn't support eDrive. I highlighted in red the reason why, from the below URL. At the time W520 was developed this protocol (and UEFI 2.3.1) didn't exist yet. We don't have any plan to retrofit the older systems to add this support now.

http://technet.microsoft.com/en-us/library/hh831627.aspx

For Encrypted Hard Drives used as startup drives:

The drive must be in an uninitialized state.The drive must be in a security inactive state.The computer must be UEFI 2.3.1 based and have the EFI_STORAGE_SECURITY_COMMAND_PROTOCOL defined. (This protocol is used to allow programs running in the EFI boot services environment to send security protocol commands to the drive).The computer must have the Compatibility Support Module (CSM) disabled in UEFI.The computer must always boot natively from UEFI.

I just installed Win10 Pro and I love it. When I enabled BitLocker, I selected to encrypt the Entire drive instead of the Used Space because I just feel I am safer with encrypting the entire drive. And my drive is not new. It had Win7 running before.

So I did a clean install of Win10 pro with BitLocker enabled to set to encrypt the ENTIRE drive.The encryption process took 7 hours to complete on a 300GB internal disk drive

When I had Win7 (and even Win8.1), it did not take that long to encrypt and I have the same exact internal drive. In Win7, the whole process took 1 hour. And with Win8.1 took a bit more time, but not 7 hours...

Why is entire disk encryption takes this long on Win10?

And also, I do not have a whole lot of programs installed. I have like 6 programs installed and there not that huge in size. Thanks!

Answer:BitLocker Encryption process VERY Slow on Win10

win10freak said:

Why is entire disk encryption takes this long on Win10?

I don't know why this is, but it is ULTRA SLOW indeed. I recently bought a WD Blue 4 TB drive and Bitlocker is already encrypting it for more than 50 hours and is still at only at 68.3%.

According to the Windows Taskmanager the Bitlocker process is using the drive at 100%, constantly reading off and writing on it at 7-15 MB/s. I don't know about the mechanics of a harddrive, but running at 100% for 75 hours (>3 days!) isn't going to improve its health.

I chose the offered new encryption XTS-AES.

In the past, encrypting a whole drive always took some time, but even with drives as big as 3 TB it never took more than 24 hours.

HI all
Im desperate, my Iomega 1tb external hdd has been encrypted and somehow windows autolocked it , now whenever the drive is installed freezes up, and if it passes to the part of the password key, bitlocker stops responding all together. I have tried connecting
and disconnecting several times but its always the same thing, Bitlocker encryption drive stops responding
please assist me here
thanks

Answer:Bitlocker encryption is not responding when unlock key is entered

Hi,

To troubleshoot the issue, I suggest you restart the machine in Safe Mode and plug the external encrypted drive on the machine, and then type the password key again.
Does the window freeze up now? If not, please restart the machine in Normal Mode and perform a
Clean Boot to check the result.

Otherwise, I suggest you plug the drive on another Windows 7 machine and unlock it. Does the issue persist? If not, please run a Check Disk and move the drive back
to the original machine.

Thanks,
NovakPlease remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ?

New to this forum, and this is my first thread. Please provide me with some help if possible.

So my problem is the following: Kept getting BSODs from some driver inflicting with ntkernel according to whocrashed and bluescreenview. Anyways, disabled my network card as I thought that was faulty, updated all my drivers and checked my ram with memtest just to be sure. Was still getting the BSODs.

Decided to use driver verifier to see which driver that caused this. Bad idea. Turns out that one of the drivers indeed was faulty, but now I'm getting blue screen before I can even log in to windows. Tried to boot into safe mood a thousand times by repeatedly pressing F8 and shift+F8 to no avail. Thought that I then could turn of driver verifier from the command prompt, but No! (Since if I could turn this of the BSOD before system start would then stop since the purpose of windows driver verifier is to force the faulty drivers to create BSOD).

Then downloaded EaseUS Recovery Essentials to see if that could help. Turns out that my ENCRYPTED (bitlocker) which my operating system is on, can't be found because I'm assuming that the change in boot order previously when running memtest disabled it.

Now had to find my win8 installation CD to force it into safe mode alternatively to re-install it, but to no avail. It says that the hard-drive is still locked even though I've got the key in a USB stick attached to the computer and even though I manually put in the recovery key. Was now to... Read more

Answer:Re-installing win8 with bitlocker encryption enabled on old OS.

Just realized I posted in the win 7 forum instead of the win8 forum. My apologies.

Hi everyone I am new to this forum. I have a question:
1. I had some confidential data stored on a partition that is not encrypted.
2. I decided to give away my computer to charity so I deleted this confidential data using a simple delete in Windows 7.
3. After that I formatted the whole hard disk and then turned on BitLocker and encrypted the whole drive and then gave away the PC to charity without using a disk wiper program .

My questions is: Is it possible for anybody to recover those deleted files using a data recovery program? I understand that when you do a simple file delete only the address of the data is deleted but not the data itself. If I encrypt the drive, files deleted before encryption do they get encrypted because they are not really deleted?

I am trying to create a Windows 10 image for my organization, and cannot figure out one particular issue with Bitlocker. It seems that after I sysprep, and throw the image on a new computer, it then has BitLocker partially enabled. What I mean is that when going to the About page in System in the settings it shows in red "You need a Microsoft account to finish encrypting this device". The C: drive also shows an opened lock with a warning icon (exclamation point in a triangle).

When going to the Manage Bitlocker page is shows an option to turn on bitlocker. Searching various sites on google has led me to the idea of turning on bitlocker, then turning it off again before sysprep. This does in fact disable BitLocker, however it appears to turn on again after imaging on a new computer.

While it's not a huge pain to disable BitLocker afterwards it does take several minutes to decrypt and multiplied that by many computers does eat up a bit of time in the end. Is there something I'm missing here to make sure BitLocker remains disabled after imaging? These are generally on Microsoft Surface Pro 4 computers that this happens on, it did not do the same thing on an HP laptop I tested.

Hey guys I have a desktop That has Windows 7 Ultimate edition installed. My parents are having start up issues with the OS. When the OS starts up, Bitlocker Drive encryption Recovery comes up with and option to unlock 2 Drives which is a separate hard drive. it comes up with a recovery key of 4889F7FD. I manually type the key and click the M: Drive which is the recovery OS. It says Error Recovering Disk due to no recovery key. I click Back and it comes up with a different recovery key as F9F25CA2. If both drives have the same password would the recovery key be the same. The bitlocker says I have temparary access but doesnt log me in.

When I go to safe mode, It loads half the files and comes up with the same. Start up recovery cant fix it. when I login to safemode, it loads half the files. Does this sound like a system wipe or can I fix this with a WIndows 7 Disc.

Answer:Bitlocker Drive Encryption OS Start up problem

Hello Zhall, and welcome to Seven Forums.

The key number ID it gives you is only to help you reference what BitLocker Recovery Key is the correct one to enter. I sure hope that you saved or wrote down the actual BitLocker Recovery Key for that drive somewhere in case something like this happens. Without it, you're not going to be able recover the HDD very easily.

Check using the tutorial below to see if you may have the actual BitLocker Recovery Key somewhere, and how to recover the OS drive.

Hi, I have a problem with E460 model 20ET0013LM. I undertand that this model have TPM 2.0.But, when I tried to active bitlocker, I receiver this message: "The Trusted Platform Module (TPM) on this computer doesn?t work with the current BIOS. Contact the computer manufacturer for BIOS upgrade instructions."Please, I need a solution.

Hello all, my issue first originates with going through the windows 8.1 store app to upgrade windows 8 -> to windows 8.1."turn off bitlocker because it isn't supported in the edition of windows you want to install"I am not sure whether i encrypted the drives after installing windows 8 or in windows 7, nevertheless i do know the encryption passwords to the drives.The biggest problem is therefore trying to remove/disable the encryption to upgrade.The Applet in the control panel is missing for some reason and so I ask for help here.I have seen some guides which rely on this applet which is usually situated between auto play and colour management.I would like to remove/disable the encryption for the upgrade, or confirm the idea that if i disconnect the two drives that are encrypted i could upgrade the OS to 8.1 and wouldn't need to worry about the encryption.The concern is that the 8.1 OS would not read the drives hence the upgrading message.My specs are this , related to Bitlocker:Windows 8 64bit - standard (non-enterprise, pro)Hard drives:1 X 128GB SSD - C:/ windows installed here ** NOT ENCRYPTED **1 X 2TB HDD - D:/ + E:/ **ENCRYPTED**1 X 3TB HDD - F:/ **ENCRYPTED**

Answer:Win 8.1 Upgrade: Bitlocker Encryption Control App Missing

To turn off bitlocker:

BitLocker Auto-unlock - Turn On or Off in Windows 8

Also through an elevated powershell command you could try:Disable-BitLocker -MountPoint "C:" Hope that helps!

I just installed Win10 Pro and I love it. When I enabled BitLocker, I selected to encrypt the Entire drive instead of the Used Space because I just feel I am safer with encrypting the entire drive. And my drive is not new. It had Win7 running before.

So I did a clean install of Win10 pro with BitLocker enabled to set to encrypt the ENTIRE drive.The encryption process took 7 hours to complete on a 300GB internal disk drive

When I had Win7 (and even Win8.1), it did not take that long to encrypt and I have the same exact internal drive. In Win7, the whole process took 1 hour. And with Win8.1 took a bit more time, but not 7 hours...

Why is entire disk encryption takes this long on Win10?

And also, I do not have a whole lot of programs installed. I have like 6 programs installed and there not that huge in size. Thanks!

Answer:BitLocker Encryption process VERY Slow on Win10

Originally Posted by win10freak

Why is entire disk encryption takes this long on Win10?

I don't know why this is, but it is ULTRA SLOW indeed. I recently bought a WD Blue 4 TB drive and Bitlocker is already encrypting it for more than 50 hours and is still at only at 68.3%.

According to the Windows Taskmanager the Bitlocker process is using the drive at 100%, constantly reading off and writing on it at 7-15 MB/s. I don't know about the mechanics of a harddrive, but running at 100% for 75 hours (>3 days!) isn't going to improve its health.

I chose the offered new encryption XTS-AES.

In the past, encrypting a whole drive always took some time, but even with drives as big as 3 TB it never took more than 24 hours.

My computer is running windows 7. It have 5 partition: C (windows), D, E, F, I. D: and F: partition is encrypted with bitlocker. I tried to shrink D for 2GB free volume wih diskmgmt in windows 7. After that, F: drive disappear on windows but It still appear on diskmgmt as unlocated partition. I tried to used Active recovery partition but It cannot solve the problem. Please tell me how?
Many thanks,

Answer:How to recover a unallocated partition with bitlocker encryption

Hello John,

Could you post a screenshot of your Disk Management window showing all of your HDD's layout to help us better understand what options you may have?

Although I'm an Admin on my Win 10 Pro system (Surface Laptop), I can't access the subject menu. Instead, I receive the SysAdmin notice, as in the screenshot. This seems like a new "feature," as I could access it from my previous Win 10 Surface. I suppose that I could make myself a System account, perhaps with PsTolols, but is there an easier way? I can access the submenus in the screenshot, e.g., Suspend protection. Maybe there's really nothing to access, but what what settings are "managed by the SysAdmin? Thanks.

Hello,
I tried to encrypt my external drive using BitLocker, but during the encryption, the usb was disconnected and
the encryption could not finished to perform. When I reconnected the drive, I could no more access the data. A pop up message saying that the "Encryption has been paused" is now on and can't resume nor access my data: please what to do?
﻿Regards,
Filsdelhomme

Hi, I have a problem with E460 model 20ET0013LM. I undertand that this model have TPM 2.0.But, when I tried to active bitlocker, I receiver this message: "The Trusted Platform Module (TPM) on this computer doesn?t work with the current BIOS. Contact the computer manufacturer for BIOS upgrade instructions."Please, I need a solution.

Although I'm an Admin on my Win 10 Pro system (Surface Laptop), I can't access the subject menu. Instead, I receive the SysAdmin notice, as in the screenshot. This seems like a new "feature," as I could access it from my previous Win 10 Surface. I suppose that I could make myself a System account, perhaps with PsTolols, but is there an easier way? I can access the submenus in the screenshot, e.g., Suspend protection. Maybe there's really nothing to access, but what what settings are "managed by the SysAdmin? Thanks.

Hi, I have a problem with E460 model 20ET0013LM. I undertand that this model have TPM 2.0.But, when I tried to active bitlocker, I receiver this message: "The Trusted Platform Module (TPM) on this computer doesn?t work with the current BIOS. Contact the computer manufacturer for BIOS upgrade instructions."Please, I need a solution.

Hello,I am attempting to use BitLocker on my X61 Tablet ThinkPad but have run across an error message that is preventing me from initializing the BitLocker encryption. The message reads as follows: "Your system is not configured to use BitLocker Drive Encryption. If there is a bootable CD or DVD in your computer, remove it...if the problem persists, contact the computer manufacturer for BIOS upgrade instructions." I have run the BitLocker Drive Preparation Tool which has created its own boot drive (S and that program tells me that all is in order. Additionally, I have verified that I have a fully updated BIOS.There is no bootable CD or DVD in the computer but there is what I assume to be Lenovo's Recovery software on a hidden and unalterable drive that appears in Disk Management. I cannot make changes to this drive; it is labeled only as"Healthy" and "EISA Configuration."Is this recovery drive the culprit that is preventing BitLocker from working? And if so, can it be disabled or BitLocker tricked into functioning while it is still present?Thanks for your help!Jay Fox

Recently upgraded to Windows OS 8.1 Pro and cannot encrypt my HP external hard drive. Encryption pauses and states that disk has errors and please run chkdsk. Ran chkdsk and no errors found. Had no difficulty encrypting the C drive with the OS. Any suggestions?

Answer:BitLocker Encryption on External Hard Drives

You cannot use Bitlocker on external drives .......Can I use Bitlocker on my external hard drive?

However you can use Bitlocker to go for an external driveBitLocker - Turn On for Removable Data Drives in Windows 8

I have Win 10 Pro and I set the Encryption method in Group Policy as being XTS-AES 256 instead of the default XTS-AES 128. Is XTS-AES 256 more secure than XTS-AES 128? https://technet.microsoft.com/en-us/...(v=vs.85).aspx

First of all, does Bitlocker come on the home edition of Windows 8.1? I recall on previous versions it was only available in the Pro editions.

However, I would prefer to use an open-source disk encryption solution. I've searched but I have not found any that can encryption the Windows installation volume, the ones I found (such as TrueCrypt) can only set up additional encrypted partitions which is no good for me.

Getting h/w encryption on my laptop has been a bit of a nightmare, but I thought I had it working.... Here is what I did:

Installed M.2 Samsung 850 evo driveInstalled samsung magician, and set Encryption to Ready to Enable.Removed existing HDDRan samsung secure erase from DVD.Installed Win10Installed Samsung Magician (It said Encryption enabled, finally!)Turned on Bitlocker. It did not prompt me for how much of the drive to encrypt, which (I was told) means that it is using hardware encryption of the drive.Added the HDD back.Updated all my drivers to latest versions for my laptop (Asus GL552VW), including Intel RST drivers (14.x)

After doing all that I just noticed that BitLocker is turned off on my C: drive (the m.2 drive)! I looked in Magician and it still says Encryption is enabled. So I went into Bitlocker to turn it on again for the drive. But now it is prompting me to encrypt used space, or whole disk, which means it isn't using h/w encryption.

What am I doing wrong here? Do I need to enable Secure Boot in BIOS? I have read that the Intel RST drivers can cause problems, but I thought that was only with older versions? Is IRST still an problem?

Edit: When I look in the Disk Management took, I see the C: partition of Disk 1 says: NTFS(Bitlocker Encrypted)., But in Bitlocker Drive Encryption tool it says it is off. Manage-BDE -status c: says that there is no encryption. Really confused now.

There are a list of requirements for hardware based encryption here - doesn't look like secure boot is required: How to Enable BitLocker Hardware Encryption with SSDs Helge Klein

For data drives:
The drive must be in an uninitialized state.
The drive must be in a security inactive state.

If the drive is used as a startup drive the following apply additionally:
The computer must always boot natively from UEFI.
The computer must have the Compatibility Support Module (CSM) disabled in UEFI.
The computer must be UEFI 2.3.1 based and have the EFI_STORAGE_SECURITY_COMMAND_PROTOCOL defined.

I only use bitlocker with software based encryption though so can't add to what they say I'm afraid but some of the comments look interesting.

Hello,
In our organization we have a policy to require Bitlocker flash drive encryption. This is set via Group Policy. I am having an issue on some computers where when they select to encrypt their flash drive for the first time, they get the following error message:
BitLocker Encryption cannot be applied to this drive because of conflicting Group Policy settings.
When write access to drives not protected by BitLocker is denied, the use of a USB startup key cannot be required. Please
have your system administrator resolve these policy conflicts before attempting to enable BitLocker.

Comparing to my laptop which is working, here is what I've gathered:

Same OU/Group PoliciesNo group membershipsSame TPM settings in BIOS and TPM Management ConsoleTried multiple flash drivesDoesn't matter who is logged in. Local admin, Domain Admin, or the user of the machine.
We do not require a USB startup key (obviously) and the policy is set to store the recovery passwords and key packages in AD DS. Another thing is the workstation HD is encrypted and the recovery key is in AD, so that tells me at least at one point it had
a healthy relationship with the DCs.
I am convinced it is not an issue with the policy, as there are currently only 2 users complaining of this issue out of 450. Where do I go on the workstation side of things to see what is happening? For your peace of mind, I have isolated the workstation
in it's own OU with only one policy applied. Here is what the policy ... Read more

Answer:Bitlocker Policy Error on Flash Drive Encryption

So I ended up opening a ticket with Microsoft. The solution was to change the following registry value from 1 to 0:
HKLM\Software\Policies\Microsoft\FVE\EnableBDEWithNoTPM
For some reason I am guessing during Windows installation it didn't detect the TPM correctly and put that in there. Who knows. Working now!

Since choosing to encrypt the ENTIRE drive with BitLocker which can take very long time to complete, can I encrypt the Used Disk Space only when re-installing Windows 10? When there is a need for me to reinstall Windows, here is how I do it.

1. Boot from USB to boot the Windows or Windows 10 OS setup process2. Then, I wipe every drive/partition under the Advanced Page section were you can format or delete all the drives listed. I usually take all the drives listed and DELETE them until I see the only one listed as Unallocated Space. That's it. Everything else is deleted.

Then I continue on with the Windows installation.

Now, this is NOT a new drive. This has been used a lot to reinstall Windows. But I always DELETE ALL the listed drives that I see until the Unallocated Disk is listed only.

So, my question is this. Will I still need to encrypt the entire drive or will encrypting the Used Space Only will be OK since I deleted all the drives and started from scratch when reinstalling Windows 10? Or does encrypting the Used Space Only applies when getting a new physical disk or PC?

Because the issue I want to avoid the next time I reinstall Windows (in case I get bit from malware or something like that), is to wait 10 hours to encrypt the whole drive again...

Now its too late, because I already began the entire disk encryption with BitLocker.

But I do want to avoid waiting in case I do have to reinstall Windows 10 again.

HiI'm running Win 10 Pro version 1607 (OS Build 14393.321), and I have a weird problem with my 298 GB WD in 2.5? SATA enclosure external hard drive. I have used it several times in the past to backup Windows 7 & 10, but now I can use it to backup Win 7 only not Win 10! I believe this problem may have started after I performed a quick format on it using a Win 10 machine, and also ran CHKDSK /R in order to mark the bad sectors.Now when I use it to backup my Win 10 machine, backup fails with error 0x8031004A: "BitLocker Drive Encryption cannot be used because critical BitLocker system files are missing or corrupted. Use Windows Startup Repair to restore these files to your computer." Also if I click on manage space it gives an error ?The backup location is not connected? even though it is connected and accessible (even shown in the backup page itself)!

Another weird issue, if I try to scan the drive from the Tools tab in Properties, scan fails with this error: ?Windows was unable to scan the drive?, and the event viewer report shows:"Checking file system on E:The shadow copy provider had an unexpected error while trying to process the specified operation.A snapshot error occured while scanning this drive. You can try again, but if this problem persists, run an offline scan and fix."But if I chose Scan and Repair, it runs successfully and reports: ?Windows successfully scanned the drive. No errors were found.?Windows Startup Repair does... Read more

I encrypted my External Drive with Bitlocker. But before it completes, computer shut down due to power failure.
My Bitlocker Encryption Stuck in Paused State and now not able to resume it.
When I try to Decrypt the External Drive through Control Panel, I get a pop-up with message "The Parameter is incorrect"
I tried using "manage-bde -resume" on Command Prompt, it says -

ERROR: An error occurred (code 0x80070057):
The parameter is incorrect.
Kindly help me out as I have to some very important data stored in that drive.

Answer:BitLocker Encryption Stuck in Paused state and now not able to Resume it

Hi,
Since you cannot run chkdsk on this drive, you need to use a 3rd party recovery software to recover the data from the drive.
If no progress, please use manage-bde ?status to export the Bitlocker status and post it here.
Spencer
TechNet Community Support

Getting h/w encryption on my laptop has been a bit of a nightmare, but I thought I had it working.... Here is what I did:

Installed M.2 Samsung 850 evo driveInstalled samsung magician, and set Encryption to Ready to Enable.Removed existing HDDRan samsung secure erase from DVD.Installed Win10Installed Samsung Magician (It said Encryption enabled, finally!)Turned on Bitlocker. It did not prompt me for how much of the drive to encrypt, which (I was told) means that it is using hardware encryption of the drive.Added the HDD back.Updated all my drivers to latest versions for my laptop (Asus GL552VW), including Intel RST drivers (14.x)

After doing all that I just noticed that BitLocker is turned off on my C: drive (the m.2 drive)! I looked in Magician and it still says Encryption is enabled. So I went into Bitlocker to turn it on again for the drive. But now it is prompting me to encrypt used space, or whole disk, which means it isn't using h/w encryption.

What am I doing wrong here? Do I need to enable Secure Boot in BIOS? I have read that the Intel RST drivers can cause problems, but I thought that was only with older versions? Is IRST still an problem?

Edit: When I look in the Disk Management took, I see the C: partition of Disk 1 says: NTFS(Bitlocker Encrypted)., But in Bitlocker Drive Encryption tool it says it is off. Manage-BDE -status c: says that there is no encryption. Really confused now.

There are a list of requirements for hardware based encryption here - doesn't look like secure boot is required: How to Enable BitLocker Hardware Encryption with SSDs Helge Klein

For data drives:
The drive must be in an uninitialized state.
The drive must be in a security inactive state.

If the drive is used as a startup drive the following apply additionally:
The computer must always boot natively from UEFI.
The computer must have the Compatibility Support Module (CSM) disabled in UEFI.
The computer must be UEFI 2.3.1 based and have the EFI_STORAGE_SECURITY_COMMAND_PROTOCOL defined.

I only use bitlocker with software based encryption though so can't add to what they say I'm afraid but some of the comments look interesting.

Hello all, I would like to order the Thinkpad Yoga with the normal Windows 8.1 (core) version, not the Pro one. The core version doesn't support Bitlocker but I heard of the new device encryption which is similar:http://arstechnica.com/information-technology/2013/10/windows-8-1-includes-seamless-automatic-disk-e... One of the requirements is that the hardware supports Connected Standby. Could you please tell if this is the case with the new Thinkpad Yoga? Thank you for your help.Steve

Answer:Thinkpad Yoga: Connected Standby / Encryption / Bitlocker

Hi,I don't know about connected standby, but the W81 bitlocker does support disk hardware encryption, if the disk itself has it. I changed the hard disk to Samsung 840 pro SSD, made fresh windows install, and turned on bitlocker. The encryption was on immediately after required reboot. If it would have been usual software encryption, it would have started background encrypt, which takes a long time. Yoga has TPM, but needs group policy change for either USB for key or PIN. I had some unreliability issues with USB key. I wish the had TPM with fingerprint or NFC. Also, i don't now if any disk they offer supports hardware encryption.

Hello,Yesterday I was decrypting my USb drive which have Bit-locker encryption and at 10% decryption I got some error(Error not at decryption process, error at windows) and decryption just stopped responding.Now when I insert that drive and try to unlock with correct password, or with the correct recovery key, Its not unlocking. Says "This password is incorrect".What could I do now?

Answer:How can I remove Bitlocker encryption for interrupted decryption process?

Did you save the decryption key somewhere on the cloud? Like on your MS account?

So I had the power go off while I was running bitlocker (to go?) on my external hdd.I was not able to pause it before this happened.I was also running BL on an internal drive.

Both were interrupted.I was able to resume and finish the internal drive.I was Not able to resume the external.

The BL application just stop responding when I try to resume/unlock the disk.It also seems I can't restart the machine normally when BL is trying to unlock the drive.

I read somewhere on the ms support site that even with power failure, resuming is possible.This might have only applied to an internal drive.I do recall seeing the pause button for the external, with a note that I needed to pause to stop in case of data corruption or something like that.

Is there a way to recover my external?

Thoughts:Do I need to let the program "not respond" for the same time or maybe longer than the time it spent encrypting it?Could I remove the drive and make it an internal?

Answer:Power failure during external disc encryption with BitLocker

i am having a similar problem, except mine in an internal HDD, it refuses to unlock with my password or my recovery key so i am locked out of the drive, i have posed this dilemmea and await replies that actually help, my post is located here

Bilocker has seized my HDD

i hope that you are able to find something useful to yourself, perhaps even posing your problem on my thread also?if i find anything useful also i will let you know.

first off, I hope I am posting this in the right sub-section. If not, I apologize (and feel free to move it to the relevant section).

My general query is to do with SSDs and Bitlocker encryption.

Description:
I recently upgraded my primary SSD (with boot and OS partitions) from an entry-level Kingston 120GB SSDNow V300 to a 240GB SanDisk Extreme PRO SSD, hoping that I would notice some improvement, if not in real-life usage then at least in benchmarks, despite my primary goal for this upgrade being the increase in disk space.

Issue:
The problem is that not only did I not see any improvement, but the results were worse than before.
The only difference between the two disks is that the first had Bitlocker AES-128 with diffuser, and the second has Bitlocker AES-256 with diffuser. Everything else in the build remains unchanged.

I understand that moving to AES-256 means taking a hit in performance, but I assumed that the better (and newer) SSD would compensate for this.

I read through all the relevant threads on this forum (like this one) as well as through other sites on the net. My understanding is that software encryption and SSDs (especially those with a controller that is designed for compression of data, like the SandForce on my original Kingston V300) do not go hand in hand.
However, my Sandisk SSD has a Marvell controller, which I take it does better with data that cannot be compressed (i.e. encrypted), so that should not be the issue.

First off, Bitlocker has never been used on this computer. All its drives have never been encrypted. The problem is that when I open Bitlocker Drive Encryption in the Control Panel there are absolutely no drives listed at all. The area under the heading "BitLocker Drive Encryption - Hard Disk Drives" is completely blank, as is the area under "BitLocker To Go". However, Windows Explorer detects all hard and removable drives just fine.

I have tried the following:

1. chkdsk /r (no problems found)2. sfc /scannnow (no problems found)3. rebuilding the MBR with Comodo Cleaning Essentials (which didn't quite like the one I had) after aswMBR found no problem4. repairing/resetting file and registry ownership and permissions to defaults using SubInACL scripts for registry and Tweaking.com for files. (This did fix a few minor nagging problems I had, by the way)5. a clean boot6. anti-malware scans (including several offline rescue CD's like Kaspersky, Comodo, ESET and AVG)7. creating a new user account with admin privileges and trying from there8. trying to trace file and registry activity with Sysinternals Process Monitor (but I don't really understand what to look for, or what most the results in the listing mean, good or bad)9. A repair installation/inplace upgrade after a clean boot (this was a problem)

The repair installation fails and aborts quickly with the following error message:

Havent used this laptop in ages, and am now locked out unles I enter my Windows BitLocker Drive Encryption Recovery Key or pin. For the life of me cant recall either and have moved and cant locate any of my "notes" on this type of thing either :grrrrrr: suggestions please!

This is for an HP EliteBook 8460p with Windows 7

TIA - Ayla[edited location by Moderator]

Answer:HELP! lost my windows bitlocker drive encryption recovery k...

you could try this http://www.microsoft.com/en-gb/download/details.aspx?id=24626

Since choosing to encrypt the ENTIRE drive with BitLocker which can take very long time to complete, can I encrypt the Used Disk Space only when re-installing Windows 10? When there is a need for me to reinstall Windows, here is how I do it.

1. Boot from USB to boot the Windows or Windows 10 OS setup process2. Then, I wipe every drive/partition under the Advanced Page section were you can format or delete all the drives listed. I usually take all the drives listed and DELETE them until I see the only one listed as Unallocated Space. That's it. Everything else is deleted.

Then I continue on with the Windows installation.

Now, this is NOT a new drive. This has been used a lot to reinstall Windows. But I always DELETE ALL the listed drives that I see until the Unallocated Disk is listed only.

So, my question is this. Will I still need to encrypt the entire drive or will encrypting the Used Space Only will be OK since I deleted all the drives and started from scratch when reinstalling Windows 10? Or does encrypting the Used Space Only applies when getting a new physical disk or PC?

Because the issue I want to avoid the next time I reinstall Windows (in case I get bit from malware or something like that), is to wait 10 hours to encrypt the whole drive again...

Now its too late, because I already began the entire disk encryption with BitLocker.

But I do want to avoid waiting in case I do have to reinstall Windows 10 again.